{"report_id":"84dbda68-aaf8-48c6-a4ac-fcdcf6e2f50b","version":0,"status":"done","tags":[],"date":"2026-06-23T11:35:05Z","url":{"schema":"https","addr":"claim-ro.pages.dev","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-ro.pages.dev/","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"title":"Ro | Airdrop","dom":{"size":12863,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1295)","md5":"4ee6b4a8e0490b24859aebad94f651f1","sha1":"90ff20d91d64fafd584c2d555836438f11651225","sha256":"f78bda22dd231df07a278b9d5640cb2dd1eec4dabd6af8d9f99db246a5a5211d","sha512":"fcfa56b0f2e2e038104aeaebe8f2b4ceaa9dd46cdc99a7acdb0b1e9411c279d88436ec1ff336fa8af403123e4e0f059ada12b8117cb2ec458cc0a287a8782e4f","ssdeep":"384:EkLtc0/Bn0UBeRZ6zBx8cgOi/sGmH5UZe0wLtOqr2gBh0UBQRZ6zBxO/JuJVlzJg:sN5Z6pi8wlBZ6Zk","tlshash":"9442a692528c5c2f111b83cb4e1967ac31af6c77e67a4092f7fb0688d29ec81e90b456","dom_hash":"domhash9ffe2875c9dfd5b84d4793e61c690487","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-ro.pages.dev","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-28T11:35:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-ro.pages.dev","ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-06-23T11:35:07.107833Z","last_seen":"2026-06-23T11:35:07.107833Z","alert_count":0,"request_count":17,"received_data":1883794,"sent_data":8552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-06-18T08:55:20.464166Z","alert_count":0,"request_count":1,"received_data":630,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-06-21T04:27:53.751766Z","alert_count":4,"request_count":2,"received_data":658279,"sent_data":1172,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"solana.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2025-10-03T14:04:26.693295Z","last_seen":"2026-06-21T04:27:53.820427Z","alert_count":0,"request_count":2,"received_data":1500,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-ro.pages.dev/howler.umd.js","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0aeb01836bdc4b0abf2aae0c0ed9001","sha1":"dfa6b508defaa0296ff4b5f9c4df34f8903a09c8","sha256":"9325c37ebe770637a505b1325b9140316feeec411862ebc08da06f05f4c91a3d","sha512":"6700476167b2341fb7f69a6469dda849ac73edbb01d625730e6a4dd0dff348b66e36209557547af7ec7fa53b03d7a8adea339a811b86a1f8866f32fb73677773","ssdeep":"12288:vnCWDIUTxjpL8XcqJjsw1uo4qu86hn/B6bk:vdDm4qu86hn/Bik","tlshash":"e38431bd6182505bdb43dd41cd2667b8a52831270f072e96665ee363ec7c869b2f33c2","size":400285,"data":"","first_seen":"2026-06-22T11:10:56.565396Z","last_seen":"2026-06-23T11:39:09.351669Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f4c8295f0c5f68d9f0dfedac6fdb3fb7","sha1":"f8a041d761dc6098d59fcb3cecc3eb3d57ace3c1","sha256":"b185445a8549b8cda89e3423c4a46ffc470973c807842438e95282ec9bfb5b8c","sha512":"4d8207ee2e008ecbfff82eab42ce2d3d9e5b8d345e7bb1dc84238169f248f4b54a82999ffb20c8327b978232085bf32629272478ec404d355cabe78d3a1d653d","ssdeep":"12288:FAmYUjxjppsXKwVjYCruI4qu86hn/P4TD:FD44qu86hn/PcD","tlshash":"6c8442bd6182601bdb43de45cd2657b8a52835270f072e96765ee323ec7c469b2f32c2","size":393679,"data":"","first_seen":"2026-06-22T11:10:56.571958Z","last_seen":"2026-06-23T11:39:09.356439Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/phantomjs-pdf.alpha.umd.js?t=29703574\u0026u=Fr__ziJxtVj4hSK4GDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N0axPHAD33WwKzJdEg","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-23T11:39:09.351163Z","times_seen":2594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-ro.pages.dev/","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T11:34:40.883Z","timestamp":1782214480883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tp8ExwJjkJcqUswKlDT9nVw5D3I41ZGfWj77KzR23NWQo8QPPnwS%2BKMt3B9sI4KUCnBCepAN6r2bWsnZIYqCIAV9wvVWpDilD1%2BDuN1rSBGZytowDNcnqa0vMcrMDE10UxJ%2FQgo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1032f59bcc83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12629,"size_decoded":4611,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1282)","md5":"4435e132b45b46e65134e7e67897b5c0","sha1":"ccf67b3f131580b75e8d1929a9ecd6359fdc6840","sha256":"1ce75fc64abc102170435167fe8a522577bcd30c0c348a30a7bc63c567d11203","sha512":"7f8b82b215ce6e8832e8657db58bb071d0c4100ae39870a7add42ca3f6869bc7e31876d6142e2177c530c6312310136d87544f0262b6490c3925fd7df3803700","ssdeep":"384:JMLlE/BL09BCRZNBx8cgji/sGfH5UZ0wLtOLr2gBZ09BIRZNBxO/JuJVlzJsrJOC:W8ZDRqliZ3C","tlshash":"ee42b792428c5c2f111b83cb4e19679c31af6c77f5ba4192f3fb0689d69ec81ed0b856","first_seen":"2026-06-23T11:35:10.144244Z","last_seen":"2026-06-23T11:35:10.144244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/howler.umd.js","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.194Z","timestamp":1782214481194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /howler.umd.js HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mP%2Bfdyx94tfmMeSSX1FcvKKSNOr2vtd8bL9UAhtDLihV3H1diqcTYI3MbrUdMOTxnIgAaDmndxDFx%2B4Uo2qIPbz2Zcxf%2FUISnf3%2FTJdekEAqysWZrv%2FnIrAB9Q0FafYHXgq5iv8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cd89965b3155598c5a2cf4788e0d2cb3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1032f5b7b553181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":400285,"size_decoded":89654,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"f0aeb01836bdc4b0abf2aae0c0ed9001","sha1":"dfa6b508defaa0296ff4b5f9c4df34f8903a09c8","sha256":"9325c37ebe770637a505b1325b9140316feeec411862ebc08da06f05f4c91a3d","sha512":"6700476167b2341fb7f69a6469dda849ac73edbb01d625730e6a4dd0dff348b66e36209557547af7ec7fa53b03d7a8adea339a811b86a1f8866f32fb73677773","ssdeep":"12288:vnCWDIUTxjpL8XcqJjsw1uo4qu86hn/B6bk:vdDm4qu86hn/Bik","tlshash":"e38431bd6182505bdb43dd41cd2667b8a52831270f072e96665ee363ec7c869b2f33c2","first_seen":"2026-06-22T11:10:56.565396Z","last_seen":"2026-06-23T11:39:09.351669Z","times_seen":5,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/i7wqt.css","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.197Z","timestamp":1782214481197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /i7wqt.css HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGtOaKmacFbzst5HR7juWUt3qX6YsGzENfNnUEad6xgIJYO2u0zC7GzshGKlzqVriVRHQ%2BhcQ3eBlML9z93hPayWxfR5KPpNzpcPDOXCF7bMIAa7%2BEpSbcPGw32RXngO4lFo3ro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b629cc2e7e719d0bc0232ff61412b62d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1032f5b7b6c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14680,"size_decoded":3762,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"f3eb46ee0278b78978b65a5278e8dd22","sha1":"0f074fd5d39209f1e84b9142f3cd4bb71f25f7de","sha256":"acb17292142865461378ec5e761c3d9914962678fb58fc848b1cfe964d894290","sha512":"aadcacb371dc8272b46a5848a160b9b7697fbef33ec4484280542a4c05a12e3a9f65aa26487010a9f834d20f82c1e763e4b86405e3944384077fab74fc58184a","ssdeep":"96:M/KxACqqqOW1OnfaV6O+5bxU1TqrQO+zfV0sGJU0EbSX1RyzB5Yg/t2gSPkrAMe7:MbCqqjfa63QO+zfTG7yzB5T/t2gSGA8I","tlshash":"c46214179f805545b31fa0946fe4479ba72ea4239e8e4dffa04b206c51ca1d512f2fce","first_seen":"2026-02-07T00:46:13.658883Z","last_seen":"2026-06-23T11:39:09.355907Z","times_seen":67,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/wallet.webp","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.206Z","timestamp":1782214481206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /wallet.webp HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 286294\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1d0d15d4b0f5bcda9bc9dff33a5d0889\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wV9MSOxVi33aHGydFZCW%2FOOBVCobZq8DfYpYF8DTsH4aLao3MTJG39PQGc9tiJQW%2FizzrnO4iq7VemS5qqIO7m2YMnioA8cYUYEtoLAFpHt7GlinC0K1Z5ysJnpPV8q6PR%2Ft%2FLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a1032f5b8ba13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286294,"size_decoded":287055,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"912a4dfb0d93593356dd0dea8bd8c8b4","sha1":"ec65ae9c7658bba8b59c85fefce0188f78c02353","sha256":"ab7af7a4c116e0af224fb8ffbafffa1d57374541dab961cdb172a04d3f37e6bd","sha512":"44a0810f01612225fb4d1e5a20aa50f1c953954a548f98f304637cd169250e390c345e1ee25f83d1eaa0772da70966de67ea2b0cb2fc699d76a4177bc34443c1","ssdeep":"6144:1alCbyx6DNfL/5n3RsMri1Pw3HXagUyr+njkr0yUpZMPHE0eDXIg:1Qc5T/d6xSXagUyT0y2ZMPH5YH","tlshash":"5754221a7aec778b1dcd7ca2832d179e655aa6c363c612d46f01ca5e1c56ff2318088d","first_seen":"2026-02-07T00:46:13.644339Z","last_seen":"2026-06-23T11:39:09.352239Z","times_seen":66,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/secureproxy?e=ping_proxy","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.460Z","timestamp":1782214481460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEWskMKfmnnHoxoWW5JRuTtFsBDATKHFNyIkekRXHdlgejI8QS5EAFyiHxuKpOAgyBkXC2d9udIjG%2FOjWNvNbBnWAbW3xILNCzdp3CK4T2O1lgHosnuC7LoL%2BL0jG4Lw4tXaO9c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1032f5d29b53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12629,"size_decoded":4612,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1282)","md5":"4435e132b45b46e65134e7e67897b5c0","sha1":"ccf67b3f131580b75e8d1929a9ecd6359fdc6840","sha256":"1ce75fc64abc102170435167fe8a522577bcd30c0c348a30a7bc63c567d11203","sha512":"7f8b82b215ce6e8832e8657db58bb071d0c4100ae39870a7add42ca3f6869bc7e31876d6142e2177c530c6312310136d87544f0262b6490c3925fd7df3803700","ssdeep":"384:JMLlE/BL09BCRZNBx8cgji/sGfH5UZ0wLtOLr2gBZ09BIRZNBxO/JuJVlzJsrJOC:W8ZDRqliZ3C","tlshash":"ee42b792428c5c2f111b83cb4e19679c31af6c77f5ba4192f3fb0689d69ec81ed0b856","first_seen":"2026-06-23T11:35:10.144244Z","last_seen":"2026-06-23T11:35:10.144244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.850Z","timestamp":1782214481850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 03:30:34 GMT","end":"Sat, 12 Sep 2026 04:30:18 GMT"},"fingerprint":{"sha1":"B7:FF:4F:03:02:BD:AC:06:8B:66:89:37:BA:8D:76:F6:1E:0B:AA:E2","sha256":"7C:CA:6B:AC:29:FC:1F:55:0C:F3:7F:2D:E1:3D:29:02:BD:C5:1F:A0:B9:AB:E9:39:36:37:0D:FB:1F:60:1E:E2"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-ro.pages.dev/\r\nOrigin: https://claim-ro.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 403 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oaRwRorTvhQSCakveH3zxdneIUrtIoW9hsdRDMEYZHhyUG4owSsGXbICgMNQyvSTEUIE2DaIpptyTX5qw%2BOJYtGwdBkGYWBRzQ1sUQ9koVFdCtXuVxR8nIvsfJnxtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1032f5faf8f5696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":630,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-24T04:14:27.232042Z","times_seen":16670028,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/css2.css","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.195Z","timestamp":1782214481195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etDvSMjMEsV%2BenzObZj03hJtdwS8gAT9Z9EnpOxgBEsQNPe8JnzTEZ7clr6%2FRqcb2tp6Pj5fAkGE7i0a%2FIVPWC3nScT4BF0DKVp%2FQIBaE5gh9Azb3reE6612ElN4OpFVU2YlTRA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a0e01c4ab5601658f87515ae280d7dc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1032f5b7b623181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8920,"size_decoded":1396,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9aed1b1208efc83b1164b9e89b31970d","sha1":"74779ad610a1cf967a8dc89d2016b34ba0e6cf36","sha256":"23287b79461e6a77efeb9828b63c97ef84bdb270aa599157356ee04ee42c11f3","sha512":"1d0bc2874d58cd564f9c86b4f8b83817a8c612a620b1f4be62b20aeb81b800a5c2da6e0b41974c3e82e70dae43a1f69db6cc80c3f2b619d11696619603de4d27","ssdeep":"192:4loLd3dx4yAlxWd38o4frl+Jd3nz40il3Ed3uK45llMvd3ht4G0:CSYMIewMoie","tlshash":"5602bb50002ba804a7831cd6bbce3e364d4db285a085d9756ffe149cbe9bd723270b5e","first_seen":"2025-08-27T17:25:21.854083Z","last_seen":"2026-06-23T11:39:09.355363Z","times_seen":88,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.503Z","timestamp":1782214481503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claim-ro.pages.dev/css2.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24836\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1df3b315841516dcf29aa177f8dab32b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vryuWdXFGdf156GjVCFedzyVOWh207I7VQxp%2F3%2BYfek5kIfD26lvUup1SBciKVfV%2F3cGN0oBZyoAG6JgAnKBktJ52oKtZ%2BoNehxHXI%2FhTcFy0O2pjLmqd9y2tklnwystCedWCPg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1032f5d6aa33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":25601,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-24T04:20:15.811904Z","times_seen":28630,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.506Z","timestamp":1782214481506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claim-ro.pages.dev/css2.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14500\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0f00219d1d5f31de66423631bd9bf3b5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ul3FOU3HobaLO3ZDccpvqG4hJ9JLozFR7QbVi8hVp%2FBdTk73Vgb7o2jSpeMh%2BEZTYG24GxFxbQOgytn49LH825MgMgVTquS8Hidr0hOxE8ZL72qcqUyxRLnLt%2BUsbKyWYrxk%2BPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1032f5d6aab3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":15263,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-06-24T04:46:28.680631Z","times_seen":2891,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.512Z","timestamp":1782214481512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claim-ro.pages.dev/css2.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14500\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0f00219d1d5f31de66423631bd9bf3b5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvL7vbMaOy4cqlVKEr8D0xw%2F4uM%2BUoMRl54L7yrL5QXixzKh0MG1RQBETIm%2BSVWWQh6J9ox%2Fya%2Faj2zj7u%2BwwaQ7KNDA8OLYtCZH2WXnObHq%2FxVG8IhILN%2BC9p2KvRrzyRuI3AI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1032f5d7ac43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":15271,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-06-24T04:46:28.680631Z","times_seen":2891,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fphantomjs-pdf.alpha.umd.js%3Ft%3D29703574%26u%3DFr__ziJxtVj4hSK4GDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N0axPHAD33WwKzJdEg","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.521Z","timestamp":1782214481521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fphantomjs-pdf.alpha.umd.js%3Ft%3D29703574%26u%3DFr__ziJxtVj4hSK4GDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N0axPHAD33WwKzJdEg HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sj%2FliH9%2BFF6iMidl0RmLm%2FJITzAC9K7Bb%2FuijNUXFi7CrpSXE2Wy9GI5t83dhopnAWbz2Bdtuyyq1RDIjc2RsVs5kCXvg08np%2Ba8NlEH3mTh9IyfylnSne%2FwJ2hyYD%2F1SKug9xE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1032f5d8af33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-24T04:14:27.232042Z","times_seen":16670028,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.563Z","timestamp":1782214481563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 415563\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2db9cdbd3358ce3cc65dc792c721ec03\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pc7lwajOCgV%2F63cbAG%2BYfj1Gn9NK7dp5EtZz4aGbP5tZ8AACbhjPNqDfSoQ9sMdpgHvjCg33HRt5eYqumMyFFBvggyOH8YbBRjXrFqQrBdIWqdoeGCMZa01dtfbkFXZpXKcq8kg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a1032f5dcbfa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415563,"size_decoded":416322,"mime_type":"image/png","magic":"PNG image data, 744 x 739, 8-bit/color RGBA, non-interlaced","md5":"0449765d6b433904bf652f844cda7c7e","sha1":"12cd10a086a35825c012518d07cb7e0373afaec6","sha256":"a32f9805d93419a09f73f88d7d98ee15cc8134ca32af02a5bc580f1530b7eadc","sha512":"643dae7338cbc48323f3e905194bb94a6020416a78b0ef99249a5b2c97cb96acd2f628cd5776f83c13a21720392847409288d780ac4b0c7d2943746128a6cdd9","ssdeep":"6144:wEGBRaL+kRmO/Cu6hvAvdVe1QgEb9ju4QeXxtoqx952Ca1heFlVtlpe4pTlAFQ4P:1+RxQwvsdV6GSoPUCaCVHIQ4w8gyivW7","tlshash":"b99423e375094ea3c23279c5879213150cdcc2e2a6f073d39dd6e54d9fa919324bbab8","first_seen":"2026-06-23T11:35:10.150864Z","last_seen":"2026-06-23T11:35:10.150864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.501Z","timestamp":1782214481501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claim-ro.pages.dev/css2.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24836\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1df3b315841516dcf29aa177f8dab32b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2By2SAhizgR5ynyUqt%2FgC%2FHJoKPBGWcB%2FS1DNswiNgHGATDiJKH8MS0%2Bhb2N%2BXb8gF03rr%2FhXq1khBhxQXHt8Kh2wZ3PITibYvr2lPvxO2vCNwAv9T5xwxBCu0GcqLpcoZ4xX8k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1032f5d6a9b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":25605,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-24T04:20:15.811904Z","times_seen":28630,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.204Z","timestamp":1782214481204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 415563\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2db9cdbd3358ce3cc65dc792c721ec03\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6yl%2F3j9GMpxGM9i0qyrGDjQBw4G3soJdvc4V7WNjXKVP50vqnKbLmNxFSZLeyI0EpBIxxFQx0MczE0RsfDjYzBdTWx5dr0LxIuOoWcoIWDChwuMP1vCFg1Ud1TbCXeCx5%2FfMZUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a1032f5b8b973181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415563,"size_decoded":416319,"mime_type":"image/png","magic":"PNG image data, 744 x 739, 8-bit/color RGBA, non-interlaced","md5":"0449765d6b433904bf652f844cda7c7e","sha1":"12cd10a086a35825c012518d07cb7e0373afaec6","sha256":"a32f9805d93419a09f73f88d7d98ee15cc8134ca32af02a5bc580f1530b7eadc","sha512":"643dae7338cbc48323f3e905194bb94a6020416a78b0ef99249a5b2c97cb96acd2f628cd5776f83c13a21720392847409288d780ac4b0c7d2943746128a6cdd9","ssdeep":"6144:wEGBRaL+kRmO/Cu6hvAvdVe1QgEb9ju4QeXxtoqx952Ca1heFlVtlpe4pTlAFQ4P:1+RxQwvsdV6GSoPUCaCVHIQ4w8gyivW7","tlshash":"b99423e375094ea3c23279c5879213150cdcc2e2a6f073d39dd6e54d9fa919324bbab8","first_seen":"2026-06-23T11:35:10.150864Z","last_seen":"2026-06-23T11:35:10.150864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/bg.webp","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.465Z","timestamp":1782214481465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /bg.webp HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/i7wqt.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 161460\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8cb193a6f24d159ba2e1be6c0253660f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmMCLHz0PuuPhl%2FbTam4N0zxECSPnsxV%2BXHIKBRf83zaaRT%2Fske0tBPSuGp6PL3tdwHmOaVOo%2F7DkV9mA6on3uVTQGG%2F4XTI90a7xYlM5ljKQfatSLWn%2F41LCd5COFgAUoIuOK4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a1032f5d29cf3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161460,"size_decoded":162225,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1922x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31f5c65edcac5f993c24b3a18acbb859","sha1":"e8cbcd7a5e96cd672288da0fc6a2aadfeda04207","sha256":"edab7d1369564101d0d9e933434bcf2b30b48945f1a8f2480fcf92d11ce015cb","sha512":"b22142abcb7a2e392baf02bff69cac82f48dc9c9026ab8aa7fa4c87265db07e4b1ad5862aac9a9ac35cdc0839d7def728db7bf7958800e55ef8826f70373fe3d","ssdeep":"3072:+YYEryXjvO1+WP9D/9eYdr8V+Cvl6zusEsUD4Amd0Xdkyo0sM4QvBwAEmfM33:+YYE2Tvru9Dc+8V+7zuXsUvmd0bojQQH","tlshash":"b1f323157de3beb1f30873604d4b0c92d74ba9470e60d2585be923239e6362a95fcf4a","first_seen":"2026-02-07T00:46:13.6532Z","last_seen":"2026-06-23T11:39:09.353951Z","times_seen":63,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.510Z","timestamp":1782214481510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claim-ro.pages.dev/css2.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14500\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0f00219d1d5f31de66423631bd9bf3b5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebarf9yjnYa14usa7OSr3nFfkctFhaHAPi%2BGo3oPVINJJVIMupmQKzC%2B%2BY2cCjT9ykzquIBp3XcTnpqNXV8cwafVoeE5tU9dpoDIky61jLINdrCNDACnJdntmkRbLzol0qeE75w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1032f5d7abd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":15261,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-06-24T04:46:28.680631Z","times_seen":2891,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/phantomjs-pdf.alpha.umd.js?t=29703574\u0026u=Fr__ziJxtVj4hSK4GDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N0axPHAD33WwKzJdEg","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:42.304Z","timestamp":1782214482304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 20:05:55 GMT","end":"Sun, 20 Sep 2026 20:05:54 GMT"},"fingerprint":{"sha1":"58:D4:2C:4D:EE:DC:6B:34:38:CD:08:65:39:3E:BD:83:84:F6:A6:88","sha256":"3E:1D:F9:80:6A:30:17:48:CC:E3:64:AA:6B:1B:A1:4C:99:E8:D6:D6:86:A3:47:03:CE:BD:26:63:12:47:86:4C"}}},"request":{"raw":"GET /@v1/cdn/js/phantomjs-pdf.alpha.umd.js?t=29703574\u0026u=Fr__ziJxtVj4hSK4GDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N0axPHAD33WwKzJdEg HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 23 Jun 2026 11:34:42 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, no-cache\r\ncontent-encoding: zstd\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=phantomjs-pdf.alpha.umd.js\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/23/2026 11:34:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5bf94ff0c772ae241ebe44ce2d196979\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":200543,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-23T11:39:09.351163Z","times_seen":2594,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":22,"connect":1,"send":0,"wait":172,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.497Z","timestamp":1782214481497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claim-ro.pages.dev/css2.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24836\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1df3b315841516dcf29aa177f8dab32b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNnm6n9H4R%2BC9yo%2BYScgR6jvIcVeOxDmCzgEls6nKJ%2BRVQ%2FZUZ4L6lfovHfKRYvmcTYmpByy7WFwIoUbWjChcLpGZJ5svHVPvptL7s08HNLQc1O%2BQNGZQwXX15JbonZu%2F0bT6xY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1032f5d5a843181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":25603,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-24T04:20:15.811904Z","times_seen":28630,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:42.055Z","timestamp":1782214482055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://claim-ro.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://claim-ro.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Tue, 23 Jun 2026 11:34:42 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a1032f61ab040731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":326,"size_decoded":799,"mime_type":"application/json","magic":"JSON text data","md5":"12b5702c64fc6341fdde088a73c3db14","sha1":"4f3f2adae0c758b1eb2aa3504a0877ea8a638de6","sha256":"7139c1766c0276e7a0af348f017c700266471b9be787f7e65b95e1727baa5a50","sha512":"aefa4426d9f89f43c6152f1c8862f5147be9bd29a8404384a236edc1a0bbbe21135cc3b5c9dceddd7ab00880bdc62df927bcb7adb0be0d2437c1c3b1277c2db9","ssdeep":"","tlshash":"30e02d803d090bbede804e17ca1122d9e3c00e5c4b00494b13db0e0472c805ce00b6bb","first_seen":"2026-06-23T11:35:10.152873Z","last_seen":"2026-06-23T11:35:10.152873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:42.058Z","timestamp":1782214482058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-ro.pages.dev/\r\nOrigin: https://claim-ro.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Tue, 23 Jun 2026 11:34:42 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1032f60fafe0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-24T04:14:27.232042Z","times_seen":16670028,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":4,"connect":10,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:42.839Z","timestamp":1782214482839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 20:05:55 GMT","end":"Sun, 20 Sep 2026 20:05:54 GMT"},"fingerprint":{"sha1":"58:D4:2C:4D:EE:DC:6B:34:38:CD:08:65:39:3E:BD:83:84:F6:A6:88","sha256":"3E:1D:F9:80:6A:30:17:48:CC:E3:64:AA:6B:1B:A1:4C:99:E8:D6:D6:86:A3:47:03:CE:BD:26:63:12:47:86:4C"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-ro.pages.dev/\r\nOrigin: https://claim-ro.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 23 Jun 2026 11:34:42 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 06/23/2026 11:34:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8cd771a54d5b8023667c7db382299b39\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":595,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-24T04:14:27.232042Z","times_seen":16670028,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":24,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-ro.pages.dev/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"claim-ro.pages.dev","domain":"claim-ro.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-ro.pages.dev/","date":"2026-06-23T11:34:41.496Z","timestamp":1782214481496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-ro.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 05:55:10 GMT","end":"Mon, 21 Sep 2026 06:52:36 GMT"},"fingerprint":{"sha1":"56:72:CA:E8:58:C0:B9:6B:AC:10:62:44:DE:2F:DE:06:F6:40:CD:FC","sha256":"D8:6A:67:95:30:78:27:4F:61:ED:97:85:CA:17:F2:E5:96:6B:E5:91:D9:49:F9:9E:F7:BE:23:E7:24:75:17:1F"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: claim-ro.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://claim-ro.pages.dev/css2.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 11:34:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24836\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1df3b315841516dcf29aa177f8dab32b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVg8hM5f4DCNWVwwm2gVpX8GfZtlnmvaYv9TizPBEFdhqqFTLRlKAtwsnSHl%2F8Wa5jye9fJUwZ2jae4M8mmeCE7HE2MSXE%2FPGT2JoTava79%2B6X4joiTCQYmYHpkM0ETWSvd6ujs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1032f5d5a7b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":25597,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-24T04:20:15.811904Z","times_seen":28630,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}